###############################################################################
# OpenVAS Vulnerability Test
#
# Mandriva Update for timezone MDVA-2008:082-1 (timezone)
#
# Authors:
# System Generated Check
#
# Copyright:
# Copyright (c) 2009 Intevation GmbH, http://www.intevation.net
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 2
# (or any later version), as published by the Free Software Foundation.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
###############################################################################

if(description)
{
  script_id(830492);
  script_version("$Revision: 1.0 $");
  script_tag(name:"risk_factor", value:"High");
  script_xref(name: "MDVA", value: "2008:082-1");
  script_name( "Mandriva Update for timezone MDVA-2008:082-1 (timezone)");
  desc = "

  Vulnerability Insight:

  Automatic mirror geolocation in drakxtools-backend in Mandriva
  Linux 2008.1 would fail for some locales, because it uses backward
  compatibility timezone names for which there were no zone.tab entries
  in timezone (bug #40184), this makes software like urpmi to not select
  optimal mirrors in its automatic media/mirrors addition mode.
  
  This update makes timezone provide backward timezone name entries in
  zone.tab file to solve this issue.
  
  Additionaly, updated timezone packages are being provided for older
  Mandriva Linux systems that do not contain the new Daylight Savings
  Time information for 2008 and later for certain time zones.
  
  Update:
  
  The previous timezone update for Mandriva Linux 2008 Spring triggered
  a bug in gnome-panel, making it immediately crash when the Gnome
  session was started. This new update works around the gnome-panel bug.

  Affected Software/OS:
  timezone on Mandriva Linux 2008.1,
  Mandriva Linux 2008.1/X86_64

  Fix: Please Install the Updated Packages.

  References:
  http://lists.mandriva.com/security-announce/2008-06/msg00010.php

  Risk factor: High";

  script_description(desc);
  script_summary("Check for the Version of timezone");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2009 Intevation GmbH");
  script_family("Mandrake Local Security Checks");
  script_dependencies("gather-package-list.nasl");
  script_require_keys("ssh/login/release");
  exit(0);
}


include("pkg-lib-rpm.inc");
include("revisions-lib.inc");

release = get_kb_item("ssh/login/release");

if(release == NULL){
  exit(0);
}

if(release == "MNDK_2008.1")
{

  if(isrpmvuln(pkg:"timezone-2008c", rpm:"timezone-2008c~1.5mdv2008.1", rls:"MNDK_2008.1"))
  {
    security_hole(0);
    exit(0);
  }

  if(isrpmvuln(pkg:"timezone-java-2008c", rpm:"timezone-java-2008c~1.5mdv2008.1", rls:"MNDK_2008.1"))
  {
    security_hole(0);
    exit(0);
  }

  exit(0);
}